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CLAIM LISTING 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 

AMENDMENTS TO THE CLAIMS 

1 . (Previously Presented) A system of securely using decryption keys during 
Programmable Logic Device (PLD) configuration, comprises: 

a microcontroller within the PLD for receiving an encrypted bitstream; 

a key storage register coupled to the microcontroller for storing key data; 

a decryptor coupled to the key storage register, wherein only the decryptor can 
read from the key storage register; and 

a configuration data register in the PLD, wherein the configuration data register 
cannot be read by the microcontroller after the decryptor is used. 

2. (Original) The system of claim 1 wherein the microcontroller stores key data in 
the key storage register, but the microcontroller cannot read from the key storage 
register. 

3. (Original) The system of claim 2, wherein the decryptor is a hardware decryptor 
embedded in an integrated circuit along with the PLD. 

4. (Currently Amended) The system of claim 1 , wherein the decryptor is a 
software decryptor stored in a memory and executed bv the microcontroller, wherein 
the system further comprises t hat us e s hardware that to enab le selectively enables 
access to the key storage register by allowing the microcontroller access when a 
procram counter of the microcontroller specifies an address within an address range 
corresponding to the software decryptor within the memor y based on a memory 
addr e ss . 

5. (Original) The system of claim 4. wherein the memory Is a ROM having a 
decryption engine. 
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6. (Currently Amended) The system of claim 1 , wherein the microcontroller further 
receives a configuration boot program comprising the decrvptor in programmatic fomi 
along with the encrypted bitstream comprising encrypted configuration data to be 
loaded into the configuration data register . 

7. (Original) The system of claim 1 , wherein the microcontroller, the key register, 
the decryptor, and the configuration data register are all within the PLD. 

8. (Original) The system of claim 1 , wherein the microcontroller is an emulated 
microcontroller in the PLD. 

9. (Cun'ently Amended) A system of securely using decryption keys during 
configuration of an integrated circuit having programmable logic, comprising: 

a microcontroller within the integrated circuit for receiving an encrypted 
bitstream; 

a key storage register coupled to the microcontroller for storing key data; 

a decryption program stored in a memory that uses a predetermined memory 
address to enable access to the key storage register; and 

a configuration data register in the integrated circuit, wherein the configuration 
data register cannot be read by the microcontroller after the decryption program is 
used; 

wherein access to the key storage register by the microcontroller is allowed onlv 
when a program counter of the microcontroller specifies an address within an address 
range corresponding to the decryption program in the memory . 

10. (Original) The system of claim 9, wherein the memory is a ROM containing a 
decryption engine. 

1 1 . (Original) The system of claim 9, wherein the microcontroller further receives a 
configuration boot program along with the encrypted bitstream. 
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12. (Previously Presented) A method of securely using decryption keys during field 
programmable gate array configuration, comprising the steps of: 

receiving an encrypted bitstream at a microcontroller within the field 
programmable gate anray; 

loading a decryptor with data from a key register; 

loading the decryptor with data from the microcontroller; and 

loading a configuration data register with a decrypted bitstream from the 
decryptor, wherein the configuration data register cannot be read by the 
microcontroller after the decryptor is used. 

13. (Original) The method of claim 12, wherein the method further comprises the 
step of loading the key register with key data from the microcontroller. 

14. (Previously Presented) The method of claim 12, wherein the configuration data 
register cannot be read by the microcontroller while the decryptor is used. 

15. (Original) The method of claim 12, wherein the microcontroller cannot read 
from the key register. 

16. (Original) The method of claim 12, wherein only the decryptor can read from 
the key storage register. 

17. (Currently Amended) The method of claim 12, wherein the steps of loading the 
decryptor with data from the kev register and loading the decryptor with data from the 
microcontroller comprises using a pr e d e t e nm i ned instruct i on enab li ng acc e ss to the 
koy storage rog i stor based on a known addross of a memory stor i ng a docrypt i on 
e ng i ne forming th e decryptor selectivelv enabling access to the kev register bv 
allowing the microcontroller access onlv when a program counter of the microcontroller 
specifies an address within an address range of the decryptor . 
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1 8. (Currently Amended) A system of securely using decryption keys during 
programmable logic device configuration, comprises: 

a memory-mapped key register coupled to a microcontroller data bus; 

a decryptor engine stored in non-volatile memory and coupled to the 
microcontroller data bus; and 

logic circuitry limiting access to the key register from the microcontroller data 
bus using specified addresses of the non-volatile memor y corresponding to the 
decryptor engine and a received program counter value of a microcontroller 

19. (Currently Amended) The system of claim 18, wherein the logic circuitry uses 
specified addresses of the non-volatile memory by limiting access to minimum and 
maximum ROM memory addresses using [[a]] the microcontroller program counter. 

20. (Currently Amended) A comput e r program product comprising: 

a computer-readable usab le medium comprising instructions written thereon in 
the form of a bitstream that configures a programmable logic device, the computer- 
readable usabl e medium comprising: 

a configuration boot program portion of the bitstream that runs a 
microcontroller on the programmable logic device; and 

an encrypted bitstream portion of the bitstream containing encrypted 
configuration data that when decrypted and loaded into a configuration data register 
on the programmable logic device configures the programmable logic device, 

wherein the configuration boot program further comprises instructions for a 
decryptor, wherein the configuration boot program stores the instructions for the 
decryptor. 

21. (Cancelled) 

22. (Currently Amended) The computer program product computer-readable 
medium of claim 20, wherein the configuration boot program comprises instructions for 
a decompressor. 
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